template/en/default/list/list.js.tmpl in Bugzilla 2.x and 3.x before 3.6.9, 3.7.x and 4.0.x before 4.0.6, and 4.1.x and 4.2.x before 4.2.1 does not properly handle multiple logins, which allows remote attackers to conduct cross-site scripting (XSS) attacks and obtain sensitive bug information via a crafted web page.
Advisories
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2012-0498 | template/en/default/list/list.js.tmpl in Bugzilla 2.x and 3.x before 3.6.9, 3.7.x and 4.0.x before 4.0.6, and 4.1.x and 4.2.x before 4.2.1 does not properly handle multiple logins, which allows remote attackers to conduct cross-site scripting (XSS) attacks and obtain sensitive bug information via a crafted web page. |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
No history.
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-06T18:23:31.018Z
Reserved: 2012-01-09T00:00:00.000Z
Link: CVE-2012-0466
No data.
Status : Deferred
Published: 2012-04-27T20:55:01.313
Modified: 2025-04-11T00:51:21.963
Link: CVE-2012-0466
No data.
OpenCVE Enrichment
No data.
Weaknesses
EUVD